last executing test programs: 5.521819442s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000004c0)={{0x4, 0x0, 0xe, 0x3, 0x6, 0x2, 0x5, 0x0, 0x0, 0x67, 0x1, 0x11}, {0x50000, 0xeeef0000, 0xd, 0x80, 0x6, 0x7, 0x6, 0x20, 0x9, 0x6, 0x4b, 0x4c}, {0xeeee0000, 0xeeee0000, 0x10, 0x8, 0xf, 0x2, 0x6c, 0x3, 0x5, 0x6, 0x24, 0xa}, {0xf000, 0x3000, 0x10, 0x0, 0x6, 0xd, 0x80, 0x6, 0x3, 0xd, 0x81, 0xc}, {0x8000000, 0x3000, 0x3, 0x8, 0xfe, 0x7f, 0x4, 0x9, 0xb4, 0x2, 0x9, 0x3}, {0x58000, 0x200000, 0x10, 0xab, 0x7, 0x7f, 0xf9, 0x96, 0x3, 0x40, 0x7f, 0xd6}, {0xdddd0000, 0x25000, 0xa, 0x10, 0x2, 0x6, 0xc9, 0xf1, 0x7f, 0x2, 0x7, 0x2}, {0x0, 0x70000, 0x1e, 0xe, 0x6, 0x8c, 0x7, 0x0, 0x57, 0x3c, 0x81, 0x35}, {0x80a0000, 0x3}, {0xeeef0000, 0x800}, 0xe0010001, 0x0, 0x933afff, 0x2600, 0xf, 0x8001, 0xfec00000, 0x0, [0x5, 0xb0, 0x5, 0x76]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d07, 0x0, 0x1}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000005c0)="f30fc7fe660fe3e0ff9106004f0f20e06635400000000f22e066b9800000c00f326635008000000f3066b9800000c00f326635002000000f30b8ff0f8ec0660f38805094e15d", 0x46}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.886926118s ago: executing program 1 (id=16): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9100, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x28) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 4.333332682s ago: executing program 3 (id=23): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x24, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b0001110000000904000001"], 0x0) 3.141022761s ago: executing program 3 (id=30): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0x2bceb000) (async, rerun: 32) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="340000001900150000000000ffffffff0a0005000000000000000000180009c00800"], 0x34}], 0x1}, 0x0) r2 = userfaultfd(0x80000) (async) getsockopt$inet_mreqn(r0, 0x0, 0x3, &(0x7f0000000200)={@rand_addr, @remote, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched_retired(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@newqdisc={0xf0, 0x24, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff1, 0x8}, {0x5, 0xffe0}, {0x0, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1e}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x80}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) (async, rerun: 32) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000500)={0x81, 0x0, 0x1}) (async) sendmmsg$inet(r4, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="c8000000000000000000000007000000441cebb30000000000000006ffffffff00000fffe000000100000040940c"], 0xc8}}], 0x1, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.043336744s ago: executing program 3 (id=31): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3, 0x1, 0xdd, 0x38, 0x345, 0x1000008, 0x5, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x10000}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x658) (async) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0xfbc3f000) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000001b40)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc090}, 0x40) (async) close(r0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, r6, 0x3141e0b2751b0f9b, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.043063414s ago: executing program 3 (id=32): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f00000000c0)=""/211, 0xd3) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @broadcast}, {0x50d, @link_local}, 0x60, {0x2, 0x4e22, @local}, 'pim6reg1\x00'}) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x27d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0x61, 0x2, 0x3, 0x1, 0x2, 0x3e, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x5a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x8, 0x0, 0x1, 0x8, 0xc}, 0x46, &(0x7f0000000240)={0x5, 0xf, 0x46, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x1, 0xf, 0x6, [0x30, 0x30, 0xffc00f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x8, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xbc, 0x6, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "63981fe3beab25825e67c1be797d9864"}]}, 0x6, [{0x24, &(0x7f00000002c0)=@string={0x24, 0x3, "d04bac11cf45d3d9c289394ac8293ec0c66ab196d29161ae609ef218e0cd20b1745f"}}, {0xc9, &(0x7f0000000300)=@string={0xc9, 0x3, "f8168aa258b80b5cf37e65ba721aa18c9963c11121fd1b59095419ea9a5535dfacb44f3d5c92a46f4f4a389f9196f5b8f14a699c9741b1d8b0469f5641a20ff11098866f3ea6fd938dce5e08e0cca25c928fccbcf75ae62530d9ec28a81f8e609148571831cccbd653640659095e0fb96eccf9b099330f47cdb60609a989869824732ee248861a5d4a1aa5369af3d2b991613a972d4accf0567d36fbb3b56ddd89e1ced626b5cb1296a0dfc7441c5017bbe38a4d35583d9617ad8bae9720b6544e7b62eba9c205"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x39}}, {0x2f, &(0x7f0000000440)=@string={0x2f, 0x3, "a07d2b3b72388f62ffc7716f40f9b45429adbb4ea60201ffb6460155543fd29193f46c42851d1592cfbaa99294"}}, {0x73, &(0x7f0000000480)=@string={0x73, 0x3, "9e811b9d771b4901af9174ad2560f2d330cc3c6bb935707dd4318e1b006b4126291ad376b9a8861eb36b4d222dfadc18d5bb6d7a41336b5f44bd65a49c592ce82014bf32620eca0ca2428b40e4b64f5981ff663893acc3058d88f82f5eaf7a27cb1d8e42985bbf9833a6f7c2dc4e92858d"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf0ff}}]}) 1.811102964s ago: executing program 1 (id=41): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x8c7, &(0x7f0000000540)={0x0, 0x8e91, 0x8, 0x2, 0x2b7, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000001740), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) syz_open_procfs(0x0, 0x0) fchmod(r2, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) close(r4) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1e, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000280)=0xc) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe0}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) 1.793867055s ago: executing program 0 (id=43): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) (async) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c) (async) write(r0, 0x0, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1000, 0x5, 0x1fc, 0x1, 0x1}, 0x1c) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"5fbcdbfb555ab7b6da2c492fe4db90aeaf8e5347c79716e75fe060d73e9de531ef8085f88b3a09f05bf084c593b4dab8756600000000077eebf9940a0b60f02d333a2c2aa407522edaabb8cfccecb9d7e0cfd915c17f32bc1ac7e430af977b671ede8605c7c72a5d1397639fd21bf848190fbdbfaeb7e166205def53caa18404ba077c2b5713acbc3d125aea78dfd962dd250511376c3a3b5732114cc92d27be04c7c146cedcc9081a8435f9c67a0c5174df503a84dc11d1d98a2473fbd39de5d9c56ffa28098914b4d47ea99e8134deb75f944afd0df95136c08e057e4d839936c0755318e58ae63dd46f7009df574d263f87508d7e496efb29de0496d4018e8d6c6f7d016752a1d10bb1df8b406bb488dbb43ffd11eb1eb9b36d57cee3b9e4e2e72e97a8059bb8e8120bf04b1d0b929692cc3e5508293bb205beba29259f18213a602dde8a8a19dd2a16b26476ca4f24e86b84ee76d86aacc862c59e154e6bec6ec6e86eb3d9dd50c4ecf6de82c2419674da3b885ac6abaea4765d256727d8560fb55d0bee0c11b1e8a05d4b932254673e8f67abfca2f184a23839164b15e021bff742605fbeb628ab93803e90954074762487b0afc90eec0e31e75dda865693dd655a190f16dbdf7ce7693d27aaf31758d97e25ab40fc44dbc911639d99b592dd0c660b820a46b8374f7e8030031c39768fb9361164f5dad133cf0d5d66c617d3d62b1f0b80e9f88ffc872df05fb5822601dfe4b39179ace0a4f6808b39bad72a80a9a9bd579d0f9a104191ef6e708083218053d3daf8211dff0a87568b7c734ab79b26cf2a65d66b00f2c2f0d3ffd5fc35b58795406446275afb8df4247add7730331b045d384b0c9fa06284463eec7167512277a435ced48980aab83b37a85b7a33ce8fd8b2a543af82bd15955b12833a59645e1de6bd6ab86c4a046a0323415351e6ddb9bcb869d2e7d092b234bfa8c5be098abcd24d8b4a659b36d8af4f3136d23f9115ea6bdc62fb89e2de415e0f08bd6ec5cc53ee3a666049168a88191c6911ea5fe7972f5627923e8b5b9e7c5323da43d48b25caee3016f88c8178fb8ab1149547e33d7fff442fa3ab42408c87cdfe35a82034bd77399a0861ce16141670ffecde05c7393ae522430425707a4c7d988f34a494727e0b1920e93c95af07d3affe9d41bb82d59ff2149705bb782c9d85e53320268fb57096c6c47e616c457a371dda361170f706e53bf9a9ac5692b72d44072217ecb8646e841b6929251a080f56be308c47dac5d59db54bd1ca7499cf3bf7cb8bb763fed9a75d2eb69573b118e3ee78fb11d41c1ce314538fec8fc542c7bf4865841a2e71fc1efd9fa385903372e3670d96398128e75d786f242a6dbf2c053dc48ee2398763b1ba3550136c14ac7ad77d3c8e97b2f36b6af200"}) clock_gettime(0x0, &(0x7f0000002fc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002f00)=[{{&(0x7f00000005c0)=@rc, 0x80, &(0x7f0000002980)=[{&(0x7f0000000640)=""/32, 0x20}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/34, 0x22}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x5, &(0x7f0000002a00)=""/200, 0xc8}, 0x7}, {{&(0x7f0000002b00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002b80)=""/16, 0x10}], 0x1, &(0x7f0000002c00)=""/129, 0x81}, 0xfffffffe}, {{&(0x7f0000002cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d40)=""/153, 0x99}], 0x1, &(0x7f0000002e40)=""/138, 0x8a}, 0x2}], 0x3, 0x10002, &(0x7f0000003000)={r2, r3+60000000}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) (async) recvmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.708092857s ago: executing program 0 (id=44): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233", 0x97}, {&(0x7f0000000ec0)="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", 0x13a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8c0c3d1d67c8bb03bb8583a03c80782dc91b7645b65ba2116c9e64ddbb0545cdc56ee7374538a65fd04d97df001c29c9b087138af146ce11e88845bc9556ab54ea3af37d14905a6715cb3d95950e673158092189a4ff888056524a743276bdca4c98e171c7731c42fa63f4a589800a0bc1da8d669bab3f7e49551957c66ce65a558c84b2cf254904d659cdacd7", 0x8d}, {&(0x7f0000000b00)="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", 0x15b}, {&(0x7f0000000740)="c319cf272fefa48c3b8cc08760fd9d24a8b12249fa4a45c25032799042725eecb77e0d2a0191df2cd9ae72b7da6d9e5c2fb728a282ff50f4fd50488884bc66311445e2a7478c886c290dd3c0872c392e0c8145fe311cd88e6bad9f26c22b283a9d4812c3a4a1325e19be229046f9e452e3332092e806b7341f3152580d5996c980ba838a87d89f312a9486d0e2e9c280ac59d1aeebfa73970b74729ffb4dfea35e2dca68b2c2373f50315f22e443738d303584816bd35dec87", 0xb9}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="ebd3f898a9f35f9f0687d56ed757eabb1ec4ae6ca742bca169389dc37b2bc6ea3018aaf5dde0b57f2e7c698da0de72d64894959dc5372a0defdf9d10a5fca8e5ec1a4813cc45e7a4a69bba49d31c2c40babd27642c8e81130cc35ee25ea5109a5b52ea11a044e158ed8f1d423847a9a497e0", 0x72}, {&(0x7f00000004c0)="7db538fba9d9a69edc1c8cdb7f78bdaf5a5b51158241af9a003eaca18f44be8ea83257d89d62f68cefad6c78998e0e2588b39df32d114b68c3e9f82c7c4343cd86efebf269f9c14356b1afc657700f6342ecec6cf6c24d82f412dcaac5cb0034955cf6b9292e554af52158fd559ebda9f2ded42beaa68dd1345376214fc553a3cae6dd55cc3b437e588ba64d7bf9f209a949d31a226860c14ced149be2ce4eb88b40b47e6970871824f4e1a98e9764588f0b178117a6d4d4471adbd30ba3e5a40de0ef50b3", 0xc5}], 0x2}}], 0x4, 0xc044) (rerun: 32) write$binfmt_misc(r0, &(0x7f0000000300), 0x5b0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000200100000000000008000f0001000000", 0x24) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af25, &(0x7f0000000b00)={0x1, 0x0, [{0x58000, 0x0, 0x0}]}) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x3b) 1.706437697s ago: executing program 0 (id=45): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, 0x0, 0x0, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 1.706137807s ago: executing program 0 (id=46): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103081, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = syz_open_dev$loop(&(0x7f0000002380), 0x3, 0x20000) ioctl$BLKFINISHZONE(r3, 0x40101288, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x22f0}, @void, @eth={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "615de1", 0xdc, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@hopopts={0x3a}], {0x4e22, 0x4e23, 0xd4, 0x0, @gue={{0x2, 0x0, 0x1, 0x4}, "6a14554bd2835fcd4ce6de7837718350e50fc09f549f2421b3b9ef91e1a3b3cde9dc6f2522ff3178dc4200771c1001a061792a3d650bf29ff45aeb47964f4fcccf99a203d774a6667eb779109aa8db7eaca90e8bb0d603e98fd75d6935d0d2dbb7266afe9d14a7fb51ecc8db1784f71ceb80a930357db681ad79eda446cb1983c455eeb6d3430d79d8725c63fd1ce32a6beec0aadf3220689e3852146a987f999f8f4ea1246471d368e7f0db30cd891d5bbf02957ae9409be8cb0408ae0127ed16916f07"}}}}}}}}, 0x116) (async) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x22f0}, @void, @eth={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "615de1", 0xdc, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@hopopts={0x3a}], {0x4e22, 0x4e23, 0xd4, 0x0, @gue={{0x2, 0x0, 0x1, 0x4}, "6a14554bd2835fcd4ce6de7837718350e50fc09f549f2421b3b9ef91e1a3b3cde9dc6f2522ff3178dc4200771c1001a061792a3d650bf29ff45aeb47964f4fcccf99a203d774a6667eb779109aa8db7eaca90e8bb0d603e98fd75d6935d0d2dbb7266afe9d14a7fb51ecc8db1784f71ceb80a930357db681ad79eda446cb1983c455eeb6d3430d79d8725c63fd1ce32a6beec0aadf3220689e3852146a987f999f8f4ea1246471d368e7f0db30cd891d5bbf02957ae9409be8cb0408ae0127ed16916f07"}}}}}}}}, 0x116) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x4, 0x1, [0x6]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 1.57130668s ago: executing program 0 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r2 = dup2(r1, r1) sendmmsg$inet6(r2, &(0x7f00000003c0), 0x1, 0x4400c060) sendto$inet6(r2, &(0x7f0000000000)="b60600000000000040010054e86741", 0xf, 0x4000080, 0x0, 0x0) 1.570687091s ago: executing program 0 (id=48): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x800, 0x0, 0x33}, 0x18) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100005ca8ea40cf0309040404001878e3f7"], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x800, 0x0, 0x33}, 0x18) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100005ca8ea40cf0309040404001878e3f7"], 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080) (async) 951.312266ms ago: executing program 1 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f000001ab40)={'ip6_vti0\x00', &(0x7f000001aac0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x36, 0xffffffff, 0x10, @empty, @loopback, 0x1, 0x40, 0x65, 0xaa}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000850) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38000000d357445a52658c92ad8e0330beae8b924d6a801c9cb524d466b31498aca0200f9c12ece44823c2a69f1c30e280c423c276a0331422ed6ec4735d4ffe33e6344bc3a5796cd19ff059fea9f54c3283e1718e9dce84fcab21e3a50a493338f972d4f493d815f62cbaf751acc2b8", @ANYRES64=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c000780080003004d0b0000"], 0x38}}, 0x401c088) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0xfffffffffffffdd9}, 0x10) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x40) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x20048804}, 0x4040040) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3ffffff}, 0xc, &(0x7f00000006c0)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000050) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000100)='-\x00', 0x0, r6) r8 = creat(&(0x7f0000000600)='./file0\x00', 0x0) close_range(r8, r2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c676e2f48e25f69643d", @ANYRESDEC=r9]) statx(0xffffffffffffff9c, &(0x7f000000a840)='./file0\x00', 0x1000, 0x0, &(0x7f000000a880)) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r8, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000780)="c462ad098cb402000000c74424002f000000c74424025d000000ff2c24b91d0300000f32c4811d55c6c483f15de9daf340a7c4a30102410005c744240011f44aadc74424029f000000c7442406000000000f011c24c4c155f406c4037d405ecfbb", 0x61}], 0x1, 0x11, 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0baa03b", @ANYRES16=r12, @ANYBLOB="000126bd7000fbdbdf25010000000000000007410000004c00180000000573797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x60}, 0x4008850) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f00008d1000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000001c0)="0f19b5d6a82682d30066b9800000c00f326635000800000f30640f2261baf80c66b84ce4ee8066efbafc0c66b82920000066ef0f01df9a000060003e3e3e0f01d1f20f70cb0066b9730700000f32", 0x4e}], 0x1, 0xb, 0x0, 0x0) 897.771897ms ago: executing program 1 (id=56): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) mremap(&(0x7f0000100000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) r7 = getpid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r7, r8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x14) r9 = socket$igmp6(0xa, 0x3, 0x2) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', &(0x7f0000000200)={0x115620, 0xa0, 0x2e}, 0x18) linkat(r10, &(0x7f00000003c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file7'}}, {@metacopy_on}]}) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="6ef9ffffffffffffff00000000008311f54c5669bf790000000000000040000000d0e17ef4d2d4d6ccbafc16fc0dff7344e470e0da2a76250790c69397c3e5a652f7ad3b39872f6364611fcd180e4c18d4fe24954c"], &(0x7f0000000140)=0x64) syz_usb_connect(0x1, 0x48, &(0x7f00000002c0)=ANY=[@ANYRES16=r6], 0x0) lsm_list_modules(&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=0x28, 0x0) 786.46812ms ago: executing program 2 (id=57): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x20000, 0x10, 0x2}, 0x18) r1 = syz_create_resource$binfmt(&(0x7f0000000200)='./file1\x00') execveat$binfmt(r0, r1, &(0x7f0000000280)={[&(0x7f0000000240)='j&%./$!\x00']}, &(0x7f00000003c0)={[&(0x7f00000002c0)='#\',@]\x00', &(0x7f0000000340)='*\x00', &(0x7f0000000380)='*\\\']\\\xee\x00']}, 0x400) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x40082, 0x0) write$vga_arbiter(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="756e6c6f636b20696f2b6d65af17d755a2739fa04576c27193ef9c3376de9f3e7cf84d917826739c514e93b0b5048cdcdecac7e957084766a961a04857afc09bf1d6892bb2171e4ba71113362c21b442cbf789f106ba0d068fe0c66aabc2f1a0d5bdde13677b298d2e2a0417ce150180808cf9ddff1ef5ab9f9d"], 0xe) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103200000000a09058202200000000009050302", @ANYRESHEX=0x0], 0x0) 219.450204ms ago: executing program 2 (id=58): io_submit(0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x24a, 0xfff, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newsa={0x1c0, 0x10, 0x1, 0x20000, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0xfffd, 0xfbfe, 0x1}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {0xfffffffffffffffe, 0x1, 0x0, 0x400000000000, 0x9, 0x0, 0x1000080000}, {0x0, 0x2000000000000000, 0x0, 0x100000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}, @algo_auth_trunc={0x6c, 0x14, {{'cmac(aes)\x00'}, 0x100, 0x60, "8aaf5d7ead2e8adfed4dbcb6772b49d7c3f8070e18375db92052466bfd28351c"}}]}, 0x1c0}}, 0x20004000) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @empty, @empty, 0x0, 0x0, 0x10000, 0x7}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}]}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 218.319074ms ago: executing program 2 (id=59): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0xe, 0x0, &(0x7f00000000c0)) truncate(&(0x7f0000000040)='./file0\x00', 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x43c4, 0x4) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) (rerun: 32) 209.278214ms ago: executing program 2 (id=60): r0 = eventfd2(0x2, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x0, r0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000001000)={0x0, &(0x7f00000000c0)=[@wr_crn={0x67, 0x20, {0x3, 0x9}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c04, 0x800, 0x8, 0xf}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c05, 0x1000, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x1}, @uexit={0x0, 0x18, 0x7ff}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x312}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_code={0x12e, 0x91, {0x2, "66baf80cb8b15efe8def66bafc0cb0f5eec401f9da690cb963090000b836000000ba000000000f300f005a8eb9800000c00f3235000800000f30c401785b33b9480b0000b8b230c74cba535bb64d0f30c4a1cd72d70166ba2100b031eec744240005000000c744240207800000c7442406000000000f011c24"}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x56, 0x0, 0x7fffffff, 0x2}}, @wr_crn={0x67, 0x20, {0x2, 0xfffffffffffffffb}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x94, 0x5, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x9, 0x8, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2813, 0xfffffffffffffff8, 0x7fff, 0x10001}}], 0x2c9}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000003000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) eventfd2(0x2, 0x1) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r0}) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x0, r0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r4, &(0x7f0000001000)={0x0, &(0x7f00000000c0)=[@wr_crn={0x67, 0x20, {0x3, 0x9}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c04, 0x800, 0x8, 0xf}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c05, 0x1000, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x1}, @uexit={0x0, 0x18, 0x7ff}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x312}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_code={0x12e, 0x91, {0x2, "66baf80cb8b15efe8def66bafc0cb0f5eec401f9da690cb963090000b836000000ba000000000f300f005a8eb9800000c00f3235000800000f30c401785b33b9480b0000b8b230c74cba535bb64d0f30c4a1cd72d70166ba2100b031eec744240005000000c744240207800000c7442406000000000f011c24"}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x56, 0x0, 0x7fffffff, 0x2}}, @wr_crn={0x67, 0x20, {0x2, 0xfffffffffffffffb}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x94, 0x5, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x9, 0x8, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2813, 0xfffffffffffffff8, 0x7fff, 0x10001}}], 0x2c9}) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000003000)) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 148.132926ms ago: executing program 2 (id=61): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) setxattr$system_posix_acl(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='system.posix_acl_default\x00', &(0x7f0000000cc0)={{}, {0x1, 0x8}, [{0x2, 0x4, 0xffffffffffffffff}], {0x4, 0x4}, [], {0x10, 0x5}}, 0x2c, 0x1) 87.400197ms ago: executing program 2 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@other={0x14a, &(0x7f0000000040)=0x6}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 86.791728ms ago: executing program 1 (id=63): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8008, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000280)={0xa, 0x0, 0x1}) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000300)={0xe200000000000000, 0x10000, 0xfffffffffffffffd, 0x2, 0x19}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 35.799069ms ago: executing program 3 (id=64): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ac1414aa000000000000000008001200000001000000000000000000060000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002004e21e000000100"/128], 0x80}}, 0x0) 0s ago: executing program 3 (id=65): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000017c0)={@loopback, @initdev, 0x0}, &(0x7f0000001800)=0xc) sendto$packet(0xffffffffffffffff, &(0x7f00000007c0)="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", 0x1000, 0x0, &(0x7f0000001840)={0x11, 0x2, r9, 0x1, 0x3}, 0x14) syz_ublk_setup_queues(r8, r7, &(0x7f0000000280)={0x0, 0xf5b8, 0x10, 0x1, 0x215, 0x0, r1}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4b8, 0x2, 0x3, 0xf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b4f, 0x4000, 0x0, 0x344}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f38, 0x1, 0x3, 0x221, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5df, 0x200, 0x2, 0x2bd, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0xc, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff9}, 0x0, r6, '\x00', {0x1, 0x362, 0x0, 0x0}}, &(0x7f0000001e40)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. [ 23.014470][ T36] audit: type=1400 audit(1785693361.310:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.017911][ T286] cgroup: Unknown subsys name 'net' [ 23.037161][ T36] audit: type=1400 audit(1785693361.320:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.064581][ T36] audit: type=1400 audit(1785693361.350:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.065194][ T286] cgroup: Unknown subsys name 'devices' [ 23.186985][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.192624][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.287728][ T36] audit: type=1400 audit(1785693361.590:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.310920][ T36] audit: type=1400 audit(1785693361.590:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.335740][ T36] audit: type=1400 audit(1785693361.590:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.363401][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.372331][ T36] audit: type=1400 audit(1785693361.670:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.397534][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.397855][ T36] audit: type=1400 audit(1785693361.670:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.432032][ T36] audit: type=1400 audit(1785693361.700:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.457601][ T36] audit: type=1400 audit(1785693361.700:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.225134][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.232319][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.239499][ T293] bridge_slave_0: entered allmulticast mode [ 24.246208][ T293] bridge_slave_0: entered promiscuous mode [ 24.253009][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.260146][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.267381][ T293] bridge_slave_1: entered allmulticast mode [ 24.273749][ T293] bridge_slave_1: entered promiscuous mode [ 24.390574][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.397693][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.404863][ T298] bridge_slave_0: entered allmulticast mode [ 24.411362][ T298] bridge_slave_0: entered promiscuous mode [ 24.417995][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.425084][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.432211][ T298] bridge_slave_1: entered allmulticast mode [ 24.438670][ T298] bridge_slave_1: entered promiscuous mode [ 24.482814][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.489926][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.497111][ T297] bridge_slave_0: entered allmulticast mode [ 24.503472][ T297] bridge_slave_0: entered promiscuous mode [ 24.510426][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.517544][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.524657][ T297] bridge_slave_1: entered allmulticast mode [ 24.531059][ T297] bridge_slave_1: entered promiscuous mode [ 24.572311][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.579453][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.586647][ T299] bridge_slave_0: entered allmulticast mode [ 24.592971][ T299] bridge_slave_0: entered promiscuous mode [ 24.602572][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.609714][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.616929][ T299] bridge_slave_1: entered allmulticast mode [ 24.623287][ T299] bridge_slave_1: entered promiscuous mode [ 24.650988][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.658119][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.665479][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.672536][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.769283][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.776864][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.804662][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.811756][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.819884][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.826945][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.879700][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.886793][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.906595][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.913655][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.927896][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.934986][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.948477][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.955568][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.978393][ T293] veth0_vlan: entered promiscuous mode [ 25.000980][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.008080][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.018323][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.025404][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.042256][ T298] veth0_vlan: entered promiscuous mode [ 25.052079][ T293] veth1_macvtap: entered promiscuous mode [ 25.077379][ T297] veth0_vlan: entered promiscuous mode [ 25.086792][ T298] veth1_macvtap: entered promiscuous mode [ 25.120513][ T299] veth0_vlan: entered promiscuous mode [ 25.132924][ T297] veth1_macvtap: entered promiscuous mode [ 25.142500][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.180580][ T299] veth1_macvtap: entered promiscuous mode [ 25.200668][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.421219][ T334] input: syz1 as /devices/virtual/input/input4 [ 25.501203][ T336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 25.510224][ T336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8'. [ 25.676255][ T352] syz.2.14: attempt to access beyond end of device [ 25.676255][ T352] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 25.689427][ T352] exFAT-fs (loop2): unable to read boot sector [ 25.695949][ T352] exFAT-fs (loop2): failed to read boot sector [ 25.702668][ T352] exFAT-fs (loop2): failed to recognize exfat type [ 25.734816][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.884929][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 25.891346][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.899761][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 2047, setting to 1024 [ 25.911655][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 25.923137][ T10] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 25.942147][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.950916][ T10] usb 1-1: Product: syz [ 25.956189][ T10] usb 1-1: Manufacturer: syz [ 25.960825][ T10] usb 1-1: SerialNumber: syz [ 25.976458][ T339] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 26.074605][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.104898][ T362] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.192434][ T10] usb 1-1: USB disconnect, device number 2 [ 26.204626][ T9] usb 2-1: device descriptor read/64, error -71 [ 26.254851][ T362] usb 3-1: Using ep0 maxpacket: 32 [ 26.261011][ T377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=377 comm=syz.3.21 [ 26.261323][ T362] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 26.279596][ T377] usb usb8: usbfs: process 377 (syz.3.21) did not claim interface 0 before use [ 26.299610][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.316528][ T362] usb 3-1: New USB device found, idVendor=0499, idProduct=100f, bcdDevice= 0.40 [ 26.331251][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.341110][ T362] usb 3-1: Product: syz [ 26.346904][ T362] usb 3-1: Manufacturer: syz [ 26.351889][ T362] usb 3-1: SerialNumber: syz [ 26.454720][ T9] usb 2-1: device descriptor read/64, error -71 [ 26.563508][ T362] usb 3-1: invalid MIDI out EP 0 [ 26.571828][ T362] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 26.582045][ T362] usb 3-1: USB disconnect, device number 2 [ 26.614609][ T45] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.638542][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.695270][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 26.765808][ T45] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 26.776424][ T45] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.790718][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 26.800457][ T45] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 26.808671][ T45] usb 4-1: Manufacturer: syz [ 26.821889][ T45] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 26.834826][ T9] usb 2-1: device descriptor read/64, error -71 [ 27.015309][ T362] usb 4-1: USB disconnect, device number 2 [ 27.085135][ T9] usb 2-1: device descriptor read/64, error -71 [ 27.194693][ T9] usb usb2-port1: attempt power cycle [ 27.234607][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.344607][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.384787][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 27.391508][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.401501][ T45] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 27.410623][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.420014][ T45] usb 1-1: Product: syz [ 27.424197][ T45] usb 1-1: Manufacturer: syz [ 27.429070][ T45] usb 1-1: SerialNumber: syz [ 27.436963][ T45] usb 1-1: unit 4 not found! [ 27.441588][ T45] usb 1-1: unit 0 not found! [ 27.524560][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 27.530837][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 27.534735][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 27.544404][ T31] usb 3-1: New USB device found, idVendor=0499, idProduct=100f, bcdDevice= 0.40 [ 27.559086][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.567806][ T31] usb 3-1: Product: syz [ 27.574709][ T31] usb 3-1: Manufacturer: syz [ 27.579385][ T31] usb 3-1: SerialNumber: syz [ 27.587556][ T9] usb 2-1: device descriptor read/8, error -71 [ 27.594324][ T402] Zero length message leads to an empty skb [ 27.637116][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.647651][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.736277][ T9] usb 2-1: device descriptor read/8, error -71 [ 27.808400][ T398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.818630][ T398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.862462][ T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.873246][ T45] usb 1-1: unit 4 not found! [ 27.878229][ T45] usb 1-1: unit 0 not found! [ 27.884881][ T45] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 27.895324][ T45] usb 1-1: unit 4 not found! [ 27.900020][ T45] usb 1-1: unit 0 not found! [ 27.904736][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.927678][ T45] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 27.939448][ T45] usb 1-1: USB disconnect, device number 3 [ 27.956597][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.974918][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 28.005662][ T9] usb 2-1: device descriptor read/8, error -71 [ 28.054586][ T10] usb 4-1: device descriptor read/64, error -71 [ 28.135612][ T9] usb 2-1: device descriptor read/8, error -71 [ 28.244676][ T9] usb usb2-port1: unable to enumerate USB device [ 28.295095][ T10] usb 4-1: device descriptor read/64, error -71 [ 28.426904][ T31] usb 3-1: invalid MIDI out EP 0 [ 28.439447][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.464828][ T31] usb 3-1: USB disconnect, device number 3 [ 28.478802][ T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.534597][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.663457][ T36] kauditd_printk_skb: 105 callbacks suppressed [ 28.663475][ T36] audit: type=1400 audit(1785693366.960:179): avc: denied { create } for pid=423 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 28.689195][ T10] usb 4-1: device descriptor read/64, error -71 [ 28.701258][ T36] audit: type=1400 audit(1785693367.010:180): avc: denied { write } for pid=429 comm="syz.2.38" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.722816][ T36] audit: type=1400 audit(1785693367.020:181): avc: denied { ioctl } for pid=429 comm="syz.2.38" path="socket:[4511]" dev="sockfs" ino=4511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.749340][ T36] audit: type=1400 audit(1785693367.020:182): avc: denied { setopt } for pid=429 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.768892][ T36] audit: type=1400 audit(1785693367.020:183): avc: denied { ioctl } for pid=429 comm="syz.2.38" path="socket:[4513]" dev="sockfs" ino=4513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.793490][ T36] audit: type=1400 audit(1785693367.020:184): avc: denied { write } for pid=429 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.813644][ T36] audit: type=1400 audit(1785693367.020:185): avc: denied { ioctl } for pid=429 comm="syz.2.38" path="socket:[4509]" dev="sockfs" ino=4509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.855981][ T36] audit: type=1400 audit(1785693367.160:186): avc: denied { write } for pid=433 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.859533][ T434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 28.912586][ T36] audit: type=1400 audit(1785693367.210:187): avc: denied { setopt } for pid=439 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.931898][ T36] audit: type=1400 audit(1785693367.220:188): avc: denied { read } for pid=439 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.974594][ T10] usb 4-1: device descriptor read/64, error -71 [ 29.084647][ T10] usb usb4-port1: attempt power cycle [ 29.266267][ T461] process 'syz.2.49' launched './file0' with NULL argv: empty string added [ 29.275265][ T461] Invalid argument reading file caps for ./file0 [ 29.344585][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.424586][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.445779][ T10] usb 4-1: device descriptor read/8, error -71 [ 29.505021][ T31] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 29.516945][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 29.527197][ T31] usb 1-1: can't read configurations, error -61 [ 29.575674][ T10] usb 4-1: device descriptor read/8, error -71 [ 29.664584][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.725338][ T482] fuse: Unknown parameter 'gn/Hâ_id' [ 29.814565][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.825045][ T31] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 29.834271][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 29.836106][ T10] usb 4-1: device descriptor read/8, error -71 [ 29.842455][ T31] usb 1-1: can't read configurations, error -61 [ 29.854888][ T31] usb usb1-port1: attempt power cycle [ 29.877258][ T489] netlink: 64 bytes leftover after parsing attributes in process `syz.1.56'. [ 29.893100][ T489] overlayfs: failed to resolve './file7': -2 [ 29.985666][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.094681][ T10] usb usb4-port1: unable to enumerate USB device [ 30.194638][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.215323][ T31] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 30.224358][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 30.232031][ T31] usb 1-1: can't read configurations, error -61 [ 30.364666][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 30.385476][ T31] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 30.394456][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 30.402108][ T31] usb 1-1: can't read configurations, error -61 [ 30.408586][ T31] usb usb1-port1: unable to enumerate USB device [ 30.614065][ T519] incfs: mount failed -22 [ 30.615834][ T517] incfs: mount failed -22 [ 30.730036][ T12] ------------[ cut here ]------------ [ 30.735604][ T12] WARNING: CPU: 1 PID: 12 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 30.746488][ T12] Modules linked in: [ 30.750420][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 30.762278][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.772399][ T12] Workqueue: iou_exit io_ring_exit_work [ 30.778054][ T12] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 30.784679][ T12] Code: 5d e9 43 2d 52 02 cc e8 1d 90 33 fe 0f 0b eb e3 e8 14 90 33 fe 0f 0b eb da e8 0b 90 33 fe 0f 0b e9 4d fe ff ff e8 ff 8f 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 30.804387][ T12] RSP: 0018:ffffc900000c7990 EFLAGS: 00010293 [ 30.810644][ T12] RAX: ffffffff8353e1c1 RBX: 1ffff110232b051d RCX: ffff888102652600 [ 30.818690][ T12] RDX: 0000000000000000 RSI: 00000000000000ea RDI: 0000000000000104 [ 30.826923][ T12] RBP: ffffc900000c79e0 R08: 0000000000000003 R09: 0000000000000004 [ 30.835059][ T12] R10: 0000000000000000 R11: ffffffff8353d1a0 R12: ffff8881197f4c00 [ 30.843071][ T12] R13: ffff8881195828c0 R14: ffff888136a30000 R15: ffff888136a30010 [ 30.851140][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.860139][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.866813][ T12] CR2: 00005651a233b6a8 CR3: 0000000133258000 CR4: 00000000003526b0 [ 30.874839][ T12] Call Trace: [ 30.878135][ T12] [ 30.881075][ T12] ublk_ch_uring_cmd+0x6f/0xa0 [ 30.885939][ T12] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 30.891977][ T12] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 30.897977][ T12] ? io_uring_cancel_generic+0x6eb/0x6eb [ 30.903647][ T12] io_ring_exit_work+0x23d/0x83b [ 30.908999][ T12] ? finish_task_switch+0x139/0x770 [ 30.914232][ T12] ? __cfi_io_ring_exit_work+0x10/0x10 [ 30.920016][ T12] ? kick_pool+0xb9/0x540 [ 30.924398][ T12] process_scheduled_works+0x7f7/0x1060 [ 30.930074][ T12] worker_thread+0xc99/0x13f0 [ 30.934820][ T12] kthread+0x2c7/0x360 [ 30.939024][ T12] ? __cfi_worker_thread+0x10/0x10 [ 30.944184][ T12] ? __cfi_kthread+0x10/0x10 [ 30.948943][ T12] ret_from_fork+0x67/0xa0 [ 30.953415][ T12] ? __cfi_kthread+0x10/0x10 [ 30.958096][ T12] ret_from_fork_asm+0x1a/0x30 [ 30.962926][ T12] [ 30.965993][ T12] ---[ end trace 0000000000000000 ]--- [ 31.012176][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.019735][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.027248][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.034775][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.042277][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.049906][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.057550][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.065602][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.073106][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.080723][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.088365][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.096068][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.103579][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.111206][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.119207][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.126966][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.134922][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.142397][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.150250][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.157901][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.165541][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.173004][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.180652][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.188273][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.195865][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.203977][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.211657][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.219282][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.227269][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.234909][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.242469][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.250264][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.258104][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.265704][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.273219][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.280837][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.288492][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.296048][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.303539][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.311371][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.319160][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.326766][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.334248][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.341862][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.349472][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.357049][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.364633][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.372098][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.379743][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.387490][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.395100][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.402560][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.410241][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.417801][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.425369][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.432823][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.440424][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.447980][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.455572][ T31] hid-generic 0000:0080:0009.0001: unknown main item tag 0x0 [ 31.463824][ T31] hid-generic 0000:0080:0009.0001: hidraw0: HID v0.d8 Device [syz0] on syz1 [ 31.534646][ T527] fido_id[527]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory